This YouTube Backend API Leaks Private Videos - Research rewarded $5000
The Backend Engineering Show with Hussein Nasser
English - January 24, 2021 19:12 - 16 minutes - 9.46 MB - ★★★★★ - 5 ratingsTechnology Homepage Download Apple Podcasts Google Podcasts Overcast Castro Pocket Casts RSS feed
Previous Episode: He found a way to Hijack Private Google Docs Screenshots with a clever hack - Google paid him $4000
Next Episode: Is SELECT * Expensive?
David Schuts, a security researcher earned $5000 dollars in Google VRP by finding a Backend YouTube API that leaks Private Video Thumbnails. let us discuss how did he do that. Resources https://bugs.xdavidhu.me/google/2021/01/11/stealing-your-private-videos-one-frame-at-a-time/ Twitter @xdavidhu https://twitter.com/xdavidhu